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program sub-network devices with at least two 
parameters (two numbers, g and n) 



create access card that includes first private key 
(secure number x) 



impose time restriction on access card 
(valid for predefined time period) 



X 



provide access card to user 



scan access card by sub-network devices to inform 
same of first private key (secure number x) 
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identify master device from among sub-network devices £20 



select a second private key (number y) by master to 
only be known to master 
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compute a public key ( Y = g y mod n) by master 224 
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send public key (Y) out over network to all devices on 
network (including sub-network) 
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compute shared encryption key (Z = (g*)* mod n), and 
request encryption of subsequent messages between 
sub-network devices using shared encryption key (Z) 
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request MAC ID from each sub-network device 230 



renew access card (optional fee) after expiration of 
predefined time period 
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